4.3

CVE-2012-1956

Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to shadow the location object (aka window.location), which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via vectors involving a plugin.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 14.0
Mozilla ≫ Firefox Version1.0
Mozilla ≫ Firefox Version1.0 Updatepreview_release
Mozilla ≫ Firefox Version1.0.1
Mozilla ≫ Firefox Version1.0.2
Mozilla ≫ Firefox Version1.0.3
Mozilla ≫ Firefox Version1.0.4
Mozilla ≫ Firefox Version1.0.5
Mozilla ≫ Firefox Version1.0.6
Mozilla ≫ Firefox Version1.0.7
Mozilla ≫ Firefox Version1.0.8
Mozilla ≫ Firefox Version1.4.1
Mozilla ≫ Firefox Version1.5
Mozilla ≫ Firefox Version1.5 Updatebeta1
Mozilla ≫ Firefox Version1.5 Updatebeta2
Mozilla ≫ Firefox Version1.5.0.1
Mozilla ≫ Firefox Version1.5.0.2
Mozilla ≫ Firefox Version1.5.0.3
Mozilla ≫ Firefox Version1.5.0.4
Mozilla ≫ Firefox Version1.5.0.5
Mozilla ≫ Firefox Version1.5.0.6
Mozilla ≫ Firefox Version1.5.0.7
Mozilla ≫ Firefox Version1.5.0.8
Mozilla ≫ Firefox Version1.5.0.9
Mozilla ≫ Firefox Version1.5.0.10
Mozilla ≫ Firefox Version1.5.0.11
Mozilla ≫ Firefox Version1.5.0.12
Mozilla ≫ Firefox Version1.5.1
Mozilla ≫ Firefox Version1.5.2
Mozilla ≫ Firefox Version1.5.3
Mozilla ≫ Firefox Version1.5.4
Mozilla ≫ Firefox Version1.5.5
Mozilla ≫ Firefox Version1.5.6
Mozilla ≫ Firefox Version1.5.7
Mozilla ≫ Firefox Version1.5.8
Mozilla ≫ Firefox Version1.8
Mozilla ≫ Firefox Version2.0
Mozilla ≫ Firefox Version2.0.0.1
Mozilla ≫ Firefox Version2.0.0.2
Mozilla ≫ Firefox Version2.0.0.3
Mozilla ≫ Firefox Version2.0.0.4
Mozilla ≫ Firefox Version2.0.0.5
Mozilla ≫ Firefox Version2.0.0.6
Mozilla ≫ Firefox Version2.0.0.7
Mozilla ≫ Firefox Version2.0.0.8
Mozilla ≫ Firefox Version2.0.0.9
Mozilla ≫ Firefox Version2.0.0.10
Mozilla ≫ Firefox Version2.0.0.11
Mozilla ≫ Firefox Version2.0.0.12
Mozilla ≫ Firefox Version2.0.0.13
Mozilla ≫ Firefox Version2.0.0.14
Mozilla ≫ Firefox Version2.0.0.15
Mozilla ≫ Firefox Version2.0.0.16
Mozilla ≫ Firefox Version2.0.0.17
Mozilla ≫ Firefox Version2.0.0.18
Mozilla ≫ Firefox Version2.0.0.19
Mozilla ≫ Firefox Version2.0.0.20
Mozilla ≫ Firefox Version3.0
Mozilla ≫ Firefox Version3.0.1
Mozilla ≫ Firefox Version3.0.2
Mozilla ≫ Firefox Version3.0.3
Mozilla ≫ Firefox Version3.0.4
Mozilla ≫ Firefox Version3.0.5
Mozilla ≫ Firefox Version3.0.6
Mozilla ≫ Firefox Version3.0.7
Mozilla ≫ Firefox Version3.0.8
Mozilla ≫ Firefox Version3.0.9
Mozilla ≫ Firefox Version3.0.10
Mozilla ≫ Firefox Version3.0.11
Mozilla ≫ Firefox Version3.0.12
Mozilla ≫ Firefox Version3.0.13
Mozilla ≫ Firefox Version3.0.14
Mozilla ≫ Firefox Version3.0.15
Mozilla ≫ Firefox Version3.0.16
Mozilla ≫ Firefox Version3.0.17
Mozilla ≫ Firefox Version3.5
Mozilla ≫ Firefox Version3.5.1
Mozilla ≫ Firefox Version3.5.2
Mozilla ≫ Firefox Version3.5.3
Mozilla ≫ Firefox Version3.5.4
Mozilla ≫ Firefox Version3.5.5
Mozilla ≫ Firefox Version3.5.6
Mozilla ≫ Firefox Version3.5.7
Mozilla ≫ Firefox Version3.5.8
Mozilla ≫ Firefox Version3.5.9
Mozilla ≫ Firefox Version3.5.10
Mozilla ≫ Firefox Version3.5.11
Mozilla ≫ Firefox Version3.5.12
Mozilla ≫ Firefox Version3.5.13
Mozilla ≫ Firefox Version3.5.14
Mozilla ≫ Firefox Version3.5.15
Mozilla ≫ Firefox Version3.6
Mozilla ≫ Firefox Version3.6.2
Mozilla ≫ Firefox Version3.6.3
Mozilla ≫ Firefox Version3.6.4
Mozilla ≫ Firefox Version3.6.6
Mozilla ≫ Firefox Version3.6.7
Mozilla ≫ Firefox Version3.6.8
Mozilla ≫ Firefox Version3.6.9
Mozilla ≫ Firefox Version3.6.10
Mozilla ≫ Firefox Version3.6.11
Mozilla ≫ Firefox Version3.6.12
Mozilla ≫ Firefox Version3.6.13
Mozilla ≫ Firefox Version3.6.14
Mozilla ≫ Firefox Version3.6.15
Mozilla ≫ Firefox Version3.6.16
Mozilla ≫ Firefox Version3.6.17
Mozilla ≫ Firefox Version3.6.18
Mozilla ≫ Firefox Version3.6.19
Mozilla ≫ Firefox Version3.6.20
Mozilla ≫ Firefox Version3.6.21
Mozilla ≫ Firefox Version3.6.22
Mozilla ≫ Firefox Version3.6.23
Mozilla ≫ Firefox Version3.6.24
Mozilla ≫ Firefox Version3.6.25
Mozilla ≫ Firefox Version4.0
Mozilla ≫ Firefox Version4.0 Updatebeta1
Mozilla ≫ Firefox Version4.0 Updatebeta10
Mozilla ≫ Firefox Version4.0 Updatebeta11
Mozilla ≫ Firefox Version4.0 Updatebeta12
Mozilla ≫ Firefox Version4.0 Updatebeta2
Mozilla ≫ Firefox Version4.0 Updatebeta3
Mozilla ≫ Firefox Version4.0 Updatebeta4
Mozilla ≫ Firefox Version4.0 Updatebeta5
Mozilla ≫ Firefox Version4.0 Updatebeta6
Mozilla ≫ Firefox Version4.0 Updatebeta7
Mozilla ≫ Firefox Version4.0 Updatebeta8
Mozilla ≫ Firefox Version4.0 Updatebeta9
Mozilla ≫ Firefox Version4.0.1
Mozilla ≫ Firefox Version5.0
Mozilla ≫ Firefox Version5.0.1
Mozilla ≫ Firefox Version6.0
Mozilla ≫ Firefox Version6.0.1
Mozilla ≫ Firefox Version6.0.2
Mozilla ≫ Firefox Version7.0
Mozilla ≫ Firefox Version7.0.1
Mozilla ≫ Firefox Version8.0
Mozilla ≫ Firefox Version8.0.1
Mozilla ≫ Firefox Version9.0
Mozilla ≫ Firefox Version9.0.1
Mozilla ≫ Firefox Version10.0
Mozilla ≫ Firefox Version10.0.1
Mozilla ≫ Firefox Version10.0.2
Mozilla ≫ Firefox Version11.0
Mozilla ≫ Firefox Version12.0
Mozilla ≫ Firefox Version12.0 Updatebeta6
Mozilla ≫ Firefox Version13.0
Mozilla ≫ Thunderbird Version <= 14.0
Mozilla ≫ Thunderbird Version1.0
Mozilla ≫ Thunderbird Version1.0.1
Mozilla ≫ Thunderbird Version1.0.2
Mozilla ≫ Thunderbird Version1.0.3
Mozilla ≫ Thunderbird Version1.0.4
Mozilla ≫ Thunderbird Version1.0.5
Mozilla ≫ Thunderbird Version1.0.5 Updatebeta
Mozilla ≫ Thunderbird Version1.0.6
Mozilla ≫ Thunderbird Version1.0.7
Mozilla ≫ Thunderbird Version1.0.8
Mozilla ≫ Thunderbird Version1.5
Mozilla ≫ Thunderbird Version1.5 Updatebeta2
Mozilla ≫ Thunderbird Version1.5.0.1
Mozilla ≫ Thunderbird Version1.5.0.2
Mozilla ≫ Thunderbird Version1.5.0.3
Mozilla ≫ Thunderbird Version1.5.0.4
Mozilla ≫ Thunderbird Version1.5.0.5
Mozilla ≫ Thunderbird Version1.5.0.6
Mozilla ≫ Thunderbird Version1.5.0.7
Mozilla ≫ Thunderbird Version1.5.0.8
Mozilla ≫ Thunderbird Version1.5.0.9
Mozilla ≫ Thunderbird Version1.5.0.10
Mozilla ≫ Thunderbird Version1.5.0.11
Mozilla ≫ Thunderbird Version1.5.0.12
Mozilla ≫ Thunderbird Version1.5.0.13
Mozilla ≫ Thunderbird Version1.5.0.14
Mozilla ≫ Thunderbird Version1.5.1
Mozilla ≫ Thunderbird Version1.5.2
Mozilla ≫ Thunderbird Version1.7.1
Mozilla ≫ Thunderbird Version1.7.3
Mozilla ≫ Thunderbird Version2.0
Mozilla ≫ Thunderbird Version2.0.0.0
Mozilla ≫ Thunderbird Version2.0.0.1
Mozilla ≫ Thunderbird Version2.0.0.2
Mozilla ≫ Thunderbird Version2.0.0.3
Mozilla ≫ Thunderbird Version2.0.0.4
Mozilla ≫ Thunderbird Version2.0.0.5
Mozilla ≫ Thunderbird Version2.0.0.6
Mozilla ≫ Thunderbird Version2.0.0.7
Mozilla ≫ Thunderbird Version2.0.0.8
Mozilla ≫ Thunderbird Version2.0.0.9
Mozilla ≫ Thunderbird Version2.0.0.11
Mozilla ≫ Thunderbird Version2.0.0.12
Mozilla ≫ Thunderbird Version2.0.0.13
Mozilla ≫ Thunderbird Version2.0.0.14
Mozilla ≫ Thunderbird Version2.0.0.15
Mozilla ≫ Thunderbird Version2.0.0.16
Mozilla ≫ Thunderbird Version2.0.0.17
Mozilla ≫ Thunderbird Version2.0.0.18
Mozilla ≫ Thunderbird Version2.0.0.19
Mozilla ≫ Thunderbird Version2.0.0.20
Mozilla ≫ Thunderbird Version2.0.0.21
Mozilla ≫ Thunderbird Version2.0.0.22
Mozilla ≫ Thunderbird Version2.0.0.23
Mozilla ≫ Thunderbird Version3.0
Mozilla ≫ Thunderbird Version3.0.1
Mozilla ≫ Thunderbird Version3.0.2
Mozilla ≫ Thunderbird Version3.0.3
Mozilla ≫ Thunderbird Version3.0.4
Mozilla ≫ Thunderbird Version3.0.5
Mozilla ≫ Thunderbird Version3.0.6
Mozilla ≫ Thunderbird Version3.0.7
Mozilla ≫ Thunderbird Version3.0.8
Mozilla ≫ Thunderbird Version3.0.9
Mozilla ≫ Thunderbird Version3.0.10
Mozilla ≫ Thunderbird Version3.0.11
Mozilla ≫ Thunderbird Version3.1
Mozilla ≫ Thunderbird Version3.1.1
Mozilla ≫ Thunderbird Version3.1.2
Mozilla ≫ Thunderbird Version3.1.3
Mozilla ≫ Thunderbird Version3.1.4
Mozilla ≫ Thunderbird Version3.1.5
Mozilla ≫ Thunderbird Version3.1.6
Mozilla ≫ Thunderbird Version3.1.7
Mozilla ≫ Thunderbird Version3.1.8
Mozilla ≫ Thunderbird Version3.1.9
Mozilla ≫ Thunderbird Version3.1.10
Mozilla ≫ Thunderbird Version3.1.11
Mozilla ≫ Thunderbird Version3.1.12
Mozilla ≫ Thunderbird Version3.1.13
Mozilla ≫ Thunderbird Version3.1.14
Mozilla ≫ Thunderbird Version3.1.15
Mozilla ≫ Thunderbird Version3.1.16
Mozilla ≫ Thunderbird Version3.1.17
Mozilla ≫ Thunderbird Version5.0
Mozilla ≫ Thunderbird Version6.0
Mozilla ≫ Thunderbird Version6.0.1
Mozilla ≫ Thunderbird Version6.0.2
Mozilla ≫ Thunderbird Version7.0
Mozilla ≫ Thunderbird Version7.0.1
Mozilla ≫ Thunderbird Version8.0
Mozilla ≫ Thunderbird Version9.0
Mozilla ≫ Thunderbird Version9.0.1
Mozilla ≫ Thunderbird Version10.0
Mozilla ≫ Thunderbird Version10.0.1
Mozilla ≫ Thunderbird Version10.0.2
Mozilla ≫ Thunderbird Version10.0.3
Mozilla ≫ Thunderbird Version10.0.4
Mozilla ≫ Thunderbird Version11.0
Mozilla ≫ Thunderbird Version12.0
Mozilla ≫ Thunderbird Version13.0
Mozilla ≫ Seamonkey Version <= 2.11
Mozilla ≫ Seamonkey Version2.0
Mozilla ≫ Seamonkey Version2.0 Updatealpha_1
Mozilla ≫ Seamonkey Version2.0 Updatealpha_2
Mozilla ≫ Seamonkey Version2.0 Updatealpha_3
Mozilla ≫ Seamonkey Version2.0 Updatebeta_1
Mozilla ≫ Seamonkey Version2.0 Updatebeta_2
Mozilla ≫ Seamonkey Version2.0 Updaterc1
Mozilla ≫ Seamonkey Version2.0 Updaterc2
Mozilla ≫ Seamonkey Version2.0.1
Mozilla ≫ Seamonkey Version2.0.2
Mozilla ≫ Seamonkey Version2.0.3
Mozilla ≫ Seamonkey Version2.0.4
Mozilla ≫ Seamonkey Version2.0.5
Mozilla ≫ Seamonkey Version2.0.6
Mozilla ≫ Seamonkey Version2.0.7
Mozilla ≫ Seamonkey Version2.0.8
Mozilla ≫ Seamonkey Version2.0.9
Mozilla ≫ Seamonkey Version2.0.10
Mozilla ≫ Seamonkey Version2.0.11
Mozilla ≫ Seamonkey Version2.0.12
Mozilla ≫ Seamonkey Version2.0.13
Mozilla ≫ Seamonkey Version2.0.14
Mozilla ≫ Seamonkey Version2.1
Mozilla ≫ Seamonkey Version2.1 Updatealpha1
Mozilla ≫ Seamonkey Version2.1 Updatealpha2
Mozilla ≫ Seamonkey Version2.1 Updatealpha3
Mozilla ≫ Seamonkey Version2.1 Updatebeta1
Mozilla ≫ Seamonkey Version2.1 Updatebeta2
Mozilla ≫ Seamonkey Version2.1 Updatebeta3
Mozilla ≫ Seamonkey Version2.1 Updaterc1
Mozilla ≫ Seamonkey Version2.1 Updaterc2
Mozilla ≫ Seamonkey Version2.2
Mozilla ≫ Seamonkey Version2.2 Updatebeta1
Mozilla ≫ Seamonkey Version2.2 Updatebeta2
Mozilla ≫ Seamonkey Version2.2 Updatebeta3
Mozilla ≫ Seamonkey Version2.3
Mozilla ≫ Seamonkey Version2.3 Updatebeta1
Mozilla ≫ Seamonkey Version2.3 Updatebeta2
Mozilla ≫ Seamonkey Version2.3 Updatebeta3
Mozilla ≫ Seamonkey Version2.3.1
Mozilla ≫ Seamonkey Version2.3.2
Mozilla ≫ Seamonkey Version2.3.3
Mozilla ≫ Seamonkey Version2.4
Mozilla ≫ Seamonkey Version2.4 Updatebeta1
Mozilla ≫ Seamonkey Version2.4 Updatebeta2
Mozilla ≫ Seamonkey Version2.4 Updatebeta3
Mozilla ≫ Seamonkey Version2.4.1
Mozilla ≫ Seamonkey Version2.5
Mozilla ≫ Seamonkey Version2.5 Updatebeta1
Mozilla ≫ Seamonkey Version2.5 Updatebeta2
Mozilla ≫ Seamonkey Version2.5 Updatebeta3
Mozilla ≫ Seamonkey Version2.5 Updatebeta4
Mozilla ≫ Seamonkey Version2.6
Mozilla ≫ Seamonkey Version2.6 Updatebeta1
Mozilla ≫ Seamonkey Version2.6 Updatebeta2
Mozilla ≫ Seamonkey Version2.6 Updatebeta3
Mozilla ≫ Seamonkey Version2.6 Updatebeta4
Mozilla ≫ Seamonkey Version2.6.1
Mozilla ≫ Seamonkey Version2.7
Mozilla ≫ Seamonkey Version2.7 Updatebeta1
Mozilla ≫ Seamonkey Version2.7 Updatebeta2
Mozilla ≫ Seamonkey Version2.7 Updatebeta3
Mozilla ≫ Seamonkey Version2.7 Updatebeta4
Mozilla ≫ Seamonkey Version2.7 Updatebeta5
Mozilla ≫ Seamonkey Version2.7.1
Mozilla ≫ Seamonkey Version2.7.2
Mozilla ≫ Seamonkey Version2.8
Mozilla ≫ Seamonkey Version2.8 Updatebeta1
Mozilla ≫ Seamonkey Version2.8 Updatebeta2
Mozilla ≫ Seamonkey Version2.8 Updatebeta3
Mozilla ≫ Seamonkey Version2.8 Updatebeta4
Mozilla ≫ Seamonkey Version2.8 Updatebeta5
Mozilla ≫ Seamonkey Version2.8 Updatebeta6
Mozilla ≫ Seamonkey Version2.9
Mozilla ≫ Seamonkey Version2.9 Updatebeta1
Mozilla ≫ Seamonkey Version2.9 Updatebeta2
Mozilla ≫ Seamonkey Version2.9 Updatebeta3
Mozilla ≫ Seamonkey Version2.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.74% 0.706
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.